Attorney Docket No.: FOUND-0057 (434103-048) 

Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 

1 . (Currently Amended) A computer implemented method comprising: 

at a network access device communicably coupled to a host network, sensing a user device 

coupled to a port of the a network access device; 
determining if the user device supports a user authentication protocol used by the host 

network, the determining comprising polling the user device for the user authentication 

protocol, the user authentication protocol comprising a protocol to validate the identity 

of a user of the user device ; and 
placing the port into a semi-authorized access state if it is determined that the user device 

does not support the user authentication protocol, the semi-authorized access state 

providing the user device with limited network access. 

2. (Previously Presented) The method of claim 1, wherein the semi-authorized state limits 
access by the user device to a network, the network selected from the group comprising a 
Voice over Internet Protocol (VoIP) network, the Internet, and a low security virtual local 
area network (VLAN). 

3-4. (Cancelled) 

5. (Previously Presented) The method of claim 1, wherein the placing comprises selectively 
placing the port into one of a plurality of semi-authorized access states. 
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6. (Previously Presented) The method of claim 5, wherein the placing comprises: 
determining a type of the user device; and 

selectively placing the port into one of a plurality of semi-authorized access states based on 
the type of the user device. 

7. (Previously Presented) The method of claim 6, wherein the selectively placing comprises 
selectively placing the port into a semi-authorized access state that limits access by the user 
device to a network comprising a Voice over Internet Protocol (VoIP) network. 

8. (Previously Presented) The method of claim 6, wherein the selectively placing comprises 
selectively placing the port into a semi-authorized access state that limits access by the user 
device to a network comprising the Internet if the user device is a portable computing 
device. 

9. (Previously Presented) The method of claim 1, wherein the user authentication protocol is 
IEEE 802. lx. 

10. (Previously Presented) The method of claim 1, wherein the network access device 
comprises a network switch. 

1 1 . (Currently Amended) A network access device comprising: 
a plurality of input ports; 

a plurality of output ports; 

a switching fabric for routing data received on the plurality of input ports to at least one of 
the plurality of output ports; and 
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control logic adapted to determine whether a user device coupled to one of the plurality of 
input ports supports a user authentication protocol used by a host network, and to place 
the one of the input ports in a semi-authorized access state if the authentication protocol 
is not supported, the semi-authorized access state providing the user device with limited 
network access , the determining comprising polling the user device for the user 
authentication protocol, the user authentication protocol comprising a protocol to 
validate the identity of a user of the user device . 

12. (Previously Presented) The device of claim 11, wherein the semi-authorized state limits 
access by the user device to a network, the network selected from the group comprising a 
Voice over Internet Protocol (VoIP) network, the Internet, and a low security virtual local 
area network (VLAN). 

13-14. (Cancelled). 

15. (Previously Presented) The device of claim 11, wherein the control logic is adapted to 
selectively place the one of the input ports into one of a plurality of semi-authorized access 
states. 

16. (Previously Presented) The device of claim 15, wherein the control logic is adapted to 
determine a type of the user device and to selectively place the one of the input ports into 
one of a plurality of semi-authorized access states based on the type of the user device. 

17. (Previously Presented) The device of claim 16, wherein the control logic is adapted to 

selectively place the one of the input ports into a semi-authorized access state that limits 
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access by the user device to a network comprising a Voice over Internet Protocol (VoIP) 
network. 



18. (Previously Presented) The device of claim 16, wherein the control logic is adapted to 
selectively place the one of the input ports into a semi-authorized access state that limits 
access by the user device to a network comprising the Internet if the user device is a portable 
computing device. 



19. (Previously Presented) The device of claim 11, wherein the user authentication protocol is 
IEEE 802. lx. 



20. (Currently Amended) A network system, comprising: 

a host network that uses a user authentication protocol; 

a network access device communicatively coupled to the host network; and 

a user device coupled to a port of the network access device; 

wherein the network access device is adapted to determine whether the user device 
supports the user authentication protocol and to place the port in a semi-authorized 
access state if the user authentication protocol is not supported, the semi-authorized 
access state providing the user device with limited network access , the determining 
comprising polling the user device for the user authentication protocol the user 
authentication protocol comprising a protocol to validate the identity of a user of the 
user device . 



21 . (Previously Presented) The network system of claim 20, wherein the semi-authorized state 

limits access by the user device to a network, the network selected from the group 
Page 5 of 17 



Attorney Docket No.: FOUND-0057 (434103-048) 
comprising a Voice Over Internet Protocol (VoIP) network, the Internet, and a low-security 
virtual local area network (VLAN). 



22-23. (Cancelled) 

24. (Previously Presented) The network system of claim 20, wherein the network access device 
is adapted to selectively place the port into one of a plurality of semi-authorized access 
states. 

25. (Previously Presented) The network system of claim 24, where the network access device is 
adapted to determine a type of the user device and to selectively place the port into one of a 
plurality of semi-authorized access states based on the type of the user device. 

26. (Previously Presented) The network system of claim 25, wherein the network access 
device is adapted to selectively place the port into a semi-authorized access state that 
limits access by the user device to a network comprising a Voice over Internet Protocol 
(VoIP) network. 

27. (Previously Presented) The network system of claim 25, wherein the network access 
device is adapted to selectively place the port into a semi-authorized access state that 
limits access by the user device to a network comprising the Internet if the user device 
is a portable computing device. 

28. (Previously Presented) The network system of claim 20, wherein the user authentication 
protocol is IEEE 802. lx. 
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29. (Previously Presented) The network system of claim 20, wherein the network access 
device is a network switch. 

30. (Cancelled) 

31. (Currently Amended) An apparatus comprising: 

means for sensing a user device coupled to a port of a network access device; 

means for determining if the user device supports a user authentication protocol used by the 

host network, the determining comprising polling the user device for the user 

authentication protocol, the user authentication protocol comprising a protocol to 

validate the identity of a user of the user device ; and 
means for placing the port into a semi-authorized access state if it is determined that the user 

device does not support the user authentication protocol, the semi-authorized access 

state providing the user device with limited network access. 

32. (Currently Amended) A computer implemented method comprising: 

at a network access device communicably coupled to a host network, sensing a user device 

coupled to a port of the a network access device; and 
allowing the user device limited access to a network via the network access device if it is 

determined that the user device is unable to communicate using a particular user 

authentication protocol , the user authentication protocol comprising a protocol to 

validate the identity of a user of the user device . 
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33. (Previously Presented) The method of claim 32, further comprising performing further user 
authentication in accordance with the user authentication protocol if it is determined that the 
user device is able to communicate using the user authentication protocol. 

34. (Previously Presented) The method of claim 32 wherein the limited access comprises less 
access than access afforded a user device that is successfully authenticated using the user 
authentication protocol. 

35. (Previously Presented) The method of claim 34 wherein the limited access comprises access 
to a low-security Virtual Local Area Network (VLAN). 

36. (Currently Amended) A network access device comprising: 
a plurality of input ports; 

a plurality of output ports; 

a switching fabric for routing data received on the plurality of input ports to at least one of 

the plurality of output ports; and 
control logic configured to allow the user device limited access to a network if it is 

determined that the user device is unable to communicate using a particular user 

authentication protoco l the user authentication protocol comprising a protocol to 

validate the identity of a user of the user device . 

37. (Previously Presented) The network access device of claim 36 wherein the control logic is 
further configured to perform further user authentication in accordance with the user 
authentication protocol if it is determined that the user device is able to communicate using 
the user authentication protocol. 
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38. (Previously Presented) The network access device of claim 36 wherein the limited access 
comprises less access than access afforded a user device that is successfully authenticated 
using the user authentication protocol. 



39. (Previously Presented) The network access device of claim 38 wherein the limited access 
comprises access to a low-security Virtual Local Area Network (VLAN). 



40. (Cancelled) 



41. (Currently Amended) An apparatus comprising: 

means for sensing a user device coupled to a port of a network access device; and 
means for allowing the user device limited access to a network via the network access 
device if it is determined that the user device is unable to communicate using a 
particular user authentication protocol , the user authentication protocol comprising a 
protocol to validate the identity of a user of the user device . 
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